How are you testing this? Are you impersonating another user? Did you make sure that user has access to the private category? It sounds a silly question, but could be an oversight?
How are you testing this? Are you impersonating another user? Did you make sure that user has access to the private category? It sounds a silly question, but could be an oversight?